CVEvulnerability

CVE-2017-6229

8.8 HIGH Published 2018-02-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.

Affected configurations

• ruckuswireless r500 firmware (< 200.6.10.1.0) • ruckuswireless r600 firmware (< 200.6.10.1.0) • ruckuswireless r310 firmware (< 200.6.10.1.0) • ruckuswireless h320 firmware (< 200.6.10.1.0) • ruckuswireless h510 firmware (< 200.6.10.1.0) • ruckuswireless r710 firmware (< 200.6.10.1.0) • ruckuswireless r720 firmware (< 200.6.10.1.0) • ruckuswireless t300 firmware (< 200.6.10.1.0) • ruckuswireless t301 firmware (< 200.6.10.1.0) • ruckuswireless t300e firmware (< 200.6.10.1.0) • ruckuswireless t610 firmware (< 200.6.10.1.0) • ruckuswireless t710 firmware (< 200.6.10.1.0) • ruckuswireless r510 firmware (< 200.6.10.1.0) • ruckuswireless zonedirector 1200 firmware (>= 9.10.2.0.11 <= 9.10.2.0.53) • ruckuswireless zonedirector 1200 firmware (>= 9.12.3.0.28 <= 9.12.3.0.83) • ruckuswireless zonedirector 1200 firmware (>= 9.13.3.0.22 <= 9.13.3.0.145) • ruckuswireless zonedirector 1200 firmware (>= 10.0.1.0.17 <= 10.0.1.0.44) • ruckuswireless zonedirector 1200 firmware 10.1.0.0.1515 • ruckuswireless zonedirector 3000 firmware (>= 9.10.2.0.11 <= 9.10.2.0.53) • ruckuswireless zonedirector 3000 firmware (>= 9.12.3.0.28 <= 9.12.3.0.83) • ruckuswireless zonedirector 3000 firmware (>= 9.13.3.0.22 <= 9.13.3.0.145) • ruckuswireless zonedirector 3000 firmware (>= 10.0.1.0.17 <= 10.0.1.0.44) • ruckuswireless zonedirector 3000 firmware 10.1.0.0.1515

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References